Skip to content
Windows
Remote Desktop
Remote Desktop Gateway

Remote Desktop Gateway

Find Remote Desktop Gateway licencing servers

Get-ADObject -LDAPFilter “(&(CN=TermServLicensing)(objectClass=serviceConnectionPoint))” | fl

Set IIS redirect to prevent default IIS page

  1. Open IIS Manager on the RD Gateway / Connection Broker server.
  2. Go to: Sites > Default Web Site Select Default Web Site itself, not RDWeb, RPC, or any child application.
  3. Open HTTP Redirect.
  4. Enable: Redirect requests to this destination Use: /RDWeb or, if you want the full URL: https://domain.com/RDWeb
  5. Important: tick only: Only redirect requests to content in this directory This is the key setting. It prevents IIS from redirecting /rpc, /RDWeb, /RDWeb/Pages, etc.
  6. Set status code: You can use Permanent (301) later, but use 302 first while testing.
  7. Apply the change.

Configure NPS MFA plugin

When configuring MFA Plugin on NPS server for Azure MFA you may require this reg key to ensure that the request functions correctly:

1
2

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AzureMfa
OVERRIDE_NUMBER_MATCHING_WITH_OTP = "FALSE"
RDS